Amazon CloudWatch logs centralization rules now support customizable destination log group structure

Amazon CloudWatch Log Centralization Updates

Amazon CloudWatch now allows customizing destination log group names when creating CloudWatch log centralization rules. This feature enables organizations to organize centralized logs into meaningful hierarchies using attributes like account ID, region, and organizational unit, aligning with their operational and compliance needs.

You can define a destination log group name structure using attributes that CloudWatch Logs replaces with actual values when logs are copied. For example, the pattern ${source.accountId}/${source.region}/${source.logGroup} creates destination log groups like 123456789012/us-east-1/cloudtrail/managementevent, facilitating easy identification of log origins.

What to do

• Define a destination log group name structure using CloudWatch attributes.
• Use the new feature to organize logs according to your organizational needs.
• Review the CloudWatch Logs Centralization documentation for more details.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.